Edit policy: DEMO Incident - robot-shop

Policy
User
Incident
  • When should I create this type of policy?


    Use the alert promotion policy when you want to create an incident based on alerts. This policy template helps you define how detailed, actionable incidents are created and managed.

    What can I do with this policy?


    You can route incidents to the right people, send notifications, create tickets when new incidents occur, and inform your colleagues when an incident is resolved.

    Where can I find more information?


    To learn more about policy templates and how to work with policies, see the product documentation.


    View IBM docs 

Policy details

Provide information to describe behavior for the policy.

You can type a maximum of 120 characters.
You can type a maximum of 450 characters.

Execution order

Use the slider or enter a value between 1-100 to set the execution order for the policy. Policies with a lower number are processed first. Values outside of 1-100 are reserved for suppression, some analytics, and preset policies that handle system needs. To see how your current policies are set, click on the number of policies listed below each range.

1100

First (1-20)

21-40

41-60

61-80

Last (81-100)

Policy triggers

Define how the policy is triggered to create an incident. Once triggered, it will look for alerts that match the conditions you specify in order to take action.

When:

Policy is triggered

Trigger entity type
One or more policy triggers must be checked.
Value of: alert.suppressed
    Value of: alert.eventCount
      OR

      Condition sets

      Add conditions that define which alerts the policy should look for and match. Important: In incident policies, only actions from the first matching condition set are executed. Learn more about condition sets and how they work.

      • If all of these conditions are met:

        Alert properties

        IF
        Value of: alert.resource.application
            String: robot-shop

            Then take the following actions:

            Create an incident
            Specify hold off time
            Set a priority
            P1
            Priority 1
            Choose how to be notified (optional)
            Notification options
            Select one or more email connections.
            Open a ticket (optional)
            Choose ticketing option(s).
            Set incident assignee (optional)